3 matches found
Sql injection
Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 viewforum.php and 2 viewtopic.php...
Code injection
showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter...
CVE-2009-0852
showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter...